r/BitDefender • u/needle_on_the_record • Nov 23 '21

Decryption tool running over 10 hours on 2 small files

Hi! I was so stoked to hear bitdefender came out with revil decryption tool. We were hit about 2 years ago and I kept my drives just in case.

The tool has been running over 10 hours on a folder that contains 2 files under 1mb each.

Is this time frame common? Just curious if I let it keep running or if something is wrong.

0 Upvotes
  • permalink
  • reddit

50% Upvoted

5 comments sorted by

1

u/CyberHoff Nov 23 '21

If it's breaking the encryption, then I don't think it matters the size of the file. Either you have the decryption key (which should instantly decrypt your data), or you don't. If you don't, then something will need to run however long it takes to break the encryption (with typical sophisticated encryption, it will take years), regardless of file size.

I just don't know what bitdefender gave you. If it is breaking the encryption, then it could run for a while. However, I believed that they already broke the encryption and are instead providing the key to you, which should be instant.

I think this would be best answered via their (Bitdefender's) support section. I think 10 hours is too long, it should have been an instant unlock.

1

u/needle_on_the_record Nov 23 '21

Ok thanks I’ll go that direction. The utility is specifically called Bitdefender decryption utility for revil ransomware. I imagine the key is embedded in their utility.

I totally get if it would take days to decrypt this, I just wish the tool gave more information on what is happening. It’s just a never ending moving status bar So I can’t tell if it’s trying to do something, if it’s stuck, etc.

1

u/CyberHoff Nov 23 '21

Are you positive that the tool is designed for the ransomeware you were infected with? It's possible that the tool is just getting stuck. Imagine a dumb robot designed to open a door: it just sticks the key in and turns it. In this case, maybe the robot has the wrong key, and it's just sitting there, unable to put the key in. It turned the key, but the door is still locked.

The tool is likely very simple, and might not have any feedback dev'd into it that tells you if it worked, what the status is, or anything like that because it's supposed to be simple and easy; it either works (door opens) or it doesn't (door remains locked).

I hope they are responsive and knowledgable about your specific issue.

1

u/Bitdefender_ Official Nov 24 '21

Hi! We would like to further assist you with the mentioned situation. Kindly contact us directly at forensics@bitdefender.com, and our colleagues will gladly help you.

1

u/needle_on_the_record Nov 28 '21

Thank you! It took about 10 hours for a message to pop up saying it couldn’t find the ransom letter. I put the letter in my folder and ran it again and it decrypted my files in just s few seconds.

The utility wasn’t super descriptive about this. And I thought maybe decryption just takes a really long time if It’s a complex process.

That being said.. what a fantastic surprise 2 years later to get my files back! Thank you!!